Director, Enterprise Risk

Overview

Box (NYSE:

BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

We are seeking an experienced Enterprise Risk Director to own Box’s Enterprise Risk Management function – with an initial emphasis on Cybersecurity and Technology. You will drive the vision, strategy, and execution for Risk at Box, working cross‑functionally with leaders across this fast‑paced, rapidly changing business – driving risk management processes, data analytics, and supporting continuous efforts to build and mature the program and make risk real actionable.

The right person will be excellent at communicating vertically and horizontally with diverse stakeholders, and be equally comfortable with execution and discussing Risk strategy with senior executives and the Board of Directors’ Audit Committee.

• Champion a Risk mindset at Box and set the strategy, tone and direction for making risk real and actionable at Box.
• Maintain Box's risk register, run our annual Enterprise and Fraud Risk Assessments and table‑top exercises with senior executives and the Board, and support ad‑hoc risk assessments.
• Collaborate with key stakeholders to evaluate and mitigate risk at the company and translate risk insights into improved decision‑making and enterprise‑wide policies.
• Facilitate the evaluation and treatment of risks, including triaging new issues, partnering with subject matter experts, and driving risk treatment to conclusion.
• Conduct root cause analysis on new and recurring issues to enhance process efficiency and reduce exception requests.
• Drive improvements in existing processes or tools, and develop new, innovative, and efficient solutions.
• Manage and analyze risk data to identify trends and issues in need of further analysis or escalation.
• Contribute to the design of cybersecurity strategies by advising on risk reduction priorities related to exception and risk register trends.

• People leader with experience leading Enterprise Risk at scale.
• 8+ years experience in operational or technology risk management. 5+ years direct people leadership experience.
• Experience with SaaS, IaaS or PaaS and knowledge of COSO, ISO, or NIST risk frameworks is preferred but not required.
• Proven ability to communicate complex risk concepts to non‑technical stakeholders.
• Natural listener and excellent written, verbal communication and presentation skills.
• Passionate about risk and driving change, and adept at juggling competing priorities.
• Ability to hustle, get stuff done, and have strong integrity – make mom proud!

We are an AI‑first company. This means you approach your work with a growth mindset and find ways to leverage AI to help make faster, smarter decisions that will 10X your impact  lives its values, with community and in‑person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week.

Your Recruiter will share more about how we work and company culture during the hiring process.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and independence of people with disabilities and is committed to giving them the same opportunity to succeed as all other employees.

Inclusiveness is core to our culture at Box, and we strive to ensure you get the most from your interview experience.

Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate…